CVE-2024-58041

CVE-2024-58041 affects Smolder versions through 1.51 for Perl. The root cause is using the non-cryptographically secure rand() entropy source in cryptographic functions, via Smolder::DB::Developer which relies on the Data::Random library (intended for testing). The result is potentially insecure ...